ALUO JANE AKINYI & TERESIA MUTINDI MUNYWOKI VERSUS SPOTON VACATIONS LIMITED
1. Introduction
The dispute before this Office arises from the complaints by Aluo Jane Akinyi and Teresia Mutindi Munywoki against Spoton Vacations Limited on the continuous sending of unsolicited promotional and direct marketing messages despite their objections. This action is in contravention of the Data Protection Act, 2019.
Table of Contents
2. Nature of Complaint
The 1st Complainant had previously lodged a complaint which was allegedly resolved, but messages continued. The 2nd Complainant had made holiday inquiries but did not consent to ongoing marketing. They alleged that the Respondent continuously sent unsolicited promotional and direct marketing messages even after they had objected to receiving them.
3. Analysis of Evidence
Complainants’ Position
- 1st Complainant: Received a promotional message on 3rd June 2024 after the Respondent had allegedly resolved an initial complaint; adduced screenshots of messages
- 2nd Complainant: Made inquiries in December 2021 and May 2023 about holiday packages; has been receiving numerous unsolicited promotional messages between May 2022 and May 2024; repeatedly requested the Respondent to cease sending messages
- Explicitly requested the Respondent to stop sending promotional messages on multiple occasions
Respondent’s Defense
- Acknowledged implementing an outreach initiative by disseminating group messages to all previously engaged clients
- Purged the 2nd Complainant’s number from its database and blocked her number
- Denied disseminating any message to the 1st Complainant after resolution of the first complaint
- All communications were consensual and they promptly complied with requests to cease
4. Issues for Determination
- Whether the Respondent fulfilled its obligations under the Act
- Whether there was an infringement of the Complainants’ rights under Section 26 of the Act
- Whether the Complainants are entitled to any remedies under the Act and the attendant Regulations
5. Final Determination
The Data Commissioner found:
- The Respondent continued sending promotional messages after the Complainants had objected.
- Inquiries about services do not constitute consent for ongoing marketing communications.
- The Respondent failed to provide a clear opt-out mechanism in its promotional messages.
- The Respondent is liable for violation of the Complainants’ rights under the Act.
Orders:
-
Compensation totaling KES 650,000:
- 1st Complainant: KES 200,000
- 2nd Complainant: KES 450,000
- An Enforcement Notice is issued against the Respondent.
- Right of appeal to the High Court within 30 days.
6. Significance and Impact
Direct Marketing and Consent
- Clarifies that inquiries about services do not constitute consent for ongoing marketing communications
- Data controllers must obtain express consent for direct marketing
Right to Object and Opt-Out Mechanisms
- Reinforces the absolute right to object to processing for direct marketing purposes
- Promotional messages must include a visible, clear, and easily understood opt-out mechanism
Broader Impact: Beyond regulatory compliance, this determination exposes a deeper commercial failure: businesses that disregard consumer objections to marketing erode trust and diminish their brand value. In an era where consumers are increasingly protective of their personal space, respecting opt-out requests is not just a legal obligation but a fundamental aspect of sustainable customer relationship management.